[ossec-list] new files does not creating alert at all

I followed the instructions to how to set up alert for add new file as follows: ossec syscheck_new_entry File added to the system. syscheck, and 7200 yes /etc,/bin,/sbin But it never works. I can not get alerts even I restart the agent and manager. Could any one help me

[ossec-list] Re: Windows agent - unable to start agent (check config)

Hi Thanks guys now it's works fine, but on Windows 2012 Server is still problem. I was doing exectly the same how on Windows 7 but when I start agent show error UNABLE TO START AGENT (CHCECK CONFIG), my ossec.log: 2016/03/31 20:31:45 ossec-agent: INFO: Service does not exist (OssecSvc)

[ossec-list] About error output in ossec.log

Hello. I'm with a loot of this output lines im my ossec.log agent. This is normal? For I am monitoring a few servers with it. There may be overload 2016/03/31 15:15:09 ossec-agent: More than 120 seconds without server response...sending win32info 2016/03/31 15:17:11 ossec-agent: More than

Re: [ossec-list] Re: ssh_asa-fwsmconfig_diff

On Thu, Mar 31, 2016 at 11:52 AM, Yurii Shatylo wrote: > yes, I have written about before, > I asked my network colleagues to setup the same password to avoid some > issues. > It would still be interesting to know why the addpass didn't work. > Do you know how can I

Re: [ossec-list] Re: ssh_asa-fwsmconfig_diff

yes, I have written about before, I asked my network colleagues to setup the same password to avoid some issues. Do you know how can I monitor status of execution this script. Where can I find out about result? Thank you in advance. 2016-03-31 18:48 GMT+03:00 dan (ddp) : > On

Re: [ossec-list] Emails are not going

Thanks, I made it working using Postfix. On Wed, Mar 30, 2016 at 4:44 PM, dan (ddp) wrote: > On Wed, Mar 30, 2016 at 5:36 AM, sandeep dubey > wrote: > > Hi, > > > > Can i use third party email provider to send OSSEC emails ? For example > > AWS's

Re: [ossec-list] Re: ssh_asa-fwsmconfig_diff

On Thu, Mar 31, 2016 at 11:44 AM, Yurii Shatylo wrote: > I've fixed the issue. > I had as you sent me. > > And I have: > > send "enable 3\r" > expect { > "*assword:" { > send "$pass\r" > #send "$addpass\r" > Are you using the same password for logging

Re: [ossec-list] Re: ssh_asa-fwsmconfig_diff

I've fixed the issue. I had as you sent me. And I have: send "enable 3\r" expect { "*assword:" { send "*$pass\r*" #send "$addpass\r" 2016-03-31 18:36 GMT+03:00 dan (ddp) : > On Thu, Mar 31, 2016 at 11:23 AM, Yurii Shatylo >

Re: [ossec-list] Re: ssh_asa-fwsmconfig_diff

On Thu, Mar 31, 2016 at 11:23 AM, Yurii Shatylo wrote: > when I have put clear password to script I have got error related to timeout > while running enable on host. > This is very fantastic situation :-( > Yurii > Assuming this means you added a statement to print the

Re: [ossec-list] Re: ssh_asa-fwsmconfig_diff

when I have put clear password to script I have got error related to timeout while running enable on host. This is very fantastic situation :-( Yurii 2016-03-31 18:08 GMT+03:00 dan (ddp) : > On Thu, Mar 31, 2016 at 11:05 AM, Yurii Shatylo > wrote: > > I

Re: [ossec-list] Re: ssh_asa-fwsmconfig_diff

On Thu, Mar 31, 2016 at 11:05 AM, Yurii Shatylo wrote: > I have checked password is the correct password in *.passlist and everything > looks like OK. > I'm sorry but I didn't understand what do you mean about print out password? > Could you please clarify more detail what

Re: [ossec-list] Re: ssh_asa-fwsmconfig_diff

I have checked password is the correct password in *.passlist and everything looks like OK. I'm sorry but I didn't understand what do you mean about print out password? Could you please clarify more detail what I should do? Yurii 2016-03-31 17:59 GMT+03:00 dan (ddp) : > On

Re: [ossec-list] Re: ssh_asa-fwsmconfig_diff

On Thu, Mar 31, 2016 at 10:51 AM, Yurii Shatylo wrote: > Dear Colleagues, > > I have done all mentions but nothing is helped. Now I have enable password > with digits and letters without special symbols. > After the testing I have got the same error. Do you know what's

[ossec-list] Re: ssh_asa-fwsmconfig_diff

Dear Colleagues, I have done all mentions but nothing is helped. Now I have enable password with digits and letters without special symbols. After the testing I have got the same error. Do you know what's wrong? Yurii On Wednesday, March 16, 2016 at 5:24:29 PM UTC+2, Yurii Shatylo wrote: >